Skip to content
Typesettercms Typesetter vulnerabilities
-
typesetter
Typesetter CMS Reflected XSS via Move Message Handling
CVE-2025-71166
4.8 Medium
-
typesetter
Typesetter CMS Reflected XSS via Status.php
CVE-2025-71165
4.8 Medium
-
typesetter
Typesetter CMS Reflected XSS via Editing.php
CVE-2025-71164
4.8 Medium
-
typesettercms typesetter
TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is...
CVE-2022-25523
8.8 High
-
typesettercms typesetter
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description...
CVE-2020-19511
6.1 Medium
-
typesettercms typesetter
** DISPUTED ** Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS...
CVE-2020-35126
Disputed
4.8 Medium
-
typesettercms typesetter
** DISPUTED ** Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP...
CVE-2020-25790
Public exploitDisputed
EPSS 15.6%
7.2 High
-
typesettercms typesetter
The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout...
CVE-2019-20077
4.3 Medium
-
typesettercms typesetter
index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT...
CVE-2018-16625
4.8 Medium
-
typesettercms typesetter
index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name.
CVE-2018-16626
4.8 Medium
-
typesettercms typesetter
Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation.
CVE-2018-16639
5.4 Medium
-
typesettercms typesetter
include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.
CVE-2018-20837
4.8 Medium
-
typesettercms typesetter
An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability,...
CVE-2018-6889
Public exploit
8.8 High
-
typesettercms typesetter
An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers...
CVE-2018-6888
Public exploit
8.0 High